Skip to content

vuln/core/index.json is not synchronized with individual vulnerability files #1595

Open

Description

@ramilexe

The vuln/core/index.json file is not kept in sync with the individual vulnerability JSON files in vuln/core/.

For example, PR #1587 added 10 new vulnerability records (195.json through 204.json), but index.json was not updated.

As a result, consumers relying on index.json receive incomplete vulnerability data.

Steps to reproduce

  1. Open vuln/core/
  2. Verify that individual vulnerability files 195.json through 204.json exist
  3. Open vuln/core/index.json
  4. Notice that the index ends at ID 194 and does not contain the newly added vulnerabilities

Expected behavior

vuln/core/index.json should contain all vulnerability records represented by the individual JSON files in vuln/core/.

Actual behavior

New vulnerability files are added without updating index.json, causing the aggregated index to become outdated.

Suggested solution

  • Update index.json as part of the vulnerability synchronization process.
  • Ideally, generate index.json automatically from the individual vulnerability files to avoid inconsistencies.
  • Add a CI validation check to ensure index.json stays synchronized with the individual files.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions